Enhanced multi-factor authorization

I'd like to suggest adding a multi-factor authentication option that sends a request to some other point of contact you've provided (email, phone number etc) that you must validate every time a login attempt is made, and have it not allow the new login attempt through until it's validated - with no exceptions, unless you contact support to lift it.